permit vrf
To permit virtual routing and forwarding instances (VRFs) for a user role VRF policy, use the permit vrf
command. To remove VRFs, use the no form of this command.
permit vrf vrf-name
no permit vrf vrf-name
Syntax Description
VRF name. The name is case sensitive.
vrf-name
Command Default
All VRFs
Command Modes
User role VRF policy configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
The vrf policy deny command denies a user role access to all VRFs except for those that you allow with the
permit vrf command.
You can repeat this command to allow more than on VRF name for the user role.
This command does not require a license.
Examples
This example shows how to permit a VRF name for a user role VRF policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# vrf policy deny
switch(config-role-vrf)# permit vrf management
This example shows how to permit a VRF name from a user role VRF policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# vrf policy deny
switch(config-role-vrf)# no permit vrf engineering
Related Commands
DescriptionCommand
Enters VRF policy configuration mode for a user role.vrf policy deny
Cisco Nexus 7000 Series Security Command Reference
581
P Commands
permit vrf
To Next Page
Loading...
